@kontextmind/kxm 0.7.36 → 0.7.38

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.36",
+      "version": "0.7.38",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.36",
+  "version": "0.7.38",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.36",
+  "version": "0.7.38",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/cli.js

@@ -33904,6 +33904,12 @@ async function cmdRouteList(runtime) {
   print(runtime.io, runtime.json, { ok: true, command: "routes list", policy }, [...policy.admitted.map((x2) => `admitted ${x2}`), ...policy.disabled.map((x2) => `disabled ${x2}`)].join("\n") || "no route decisions");
   return 0;
 }
+async function cmdRouteCount(runtime) {
+  const policy = loadRoutePolicy(runtime.dirs.workdir);
+  const summary = `${policy.admitted.length} admitted / ${policy.disabled.length} disabled`;
+  print(runtime.io, runtime.json, { ok: true, command: "routes count", admitted: policy.admitted.length, disabled: policy.disabled.length, summary }, summary);
+  return 0;
+}
 async function cmdModelInventoryRefresh(runtime) {
   if (runtime.dryRun) {
     print(runtime.io, runtime.json, { ok: true, command: "models inventory refresh", dryRun: true }, "would refresh .kxm/models/inventory.yaml");
@@ -48805,6 +48811,9 @@ function createProgram(ctx, result) {
   addGlobalOptions(routesCmd.command("list").description("List route decisions")).action(async function routesListAction() {
     result.code = await cmdRouteList(runtimeFrom(ctx, this));
   });
+  addGlobalOptions(routesCmd.command("count").description("Count admitted and disabled routes")).action(async function routesCountAction() {
+    result.code = await cmdRouteCount(runtimeFrom(ctx, this));
+  });
   for (const status of ["admit", "disable"]) {
     addGlobalOptions(routesCmd.command(status).description(`${status === "admit" ? "Admit" : "Disable"} a model route from the inventory`)).option("--model <id>", "Exact model id; omit to choose interactively").action(async function routeChangeAction(options) {
       result.code = await cmdRouteChange(runtimeFrom(ctx, this), status === "admit" ? "admitted" : "disabled", options.model);
@@ -49196,8 +49205,10 @@ function removedMeshInvocation(argv) {
   return { invoked, json };
 }
 async function runCli(argv, env = process.env, io = { stdout: (text) => process.stdout.write(text), stderr: (text) => process.stderr.write(text) }, cwd = process.cwd()) {
-  const originalStdout = io.stdout;
-  const originalStderr = io.stderr;
+  const nested = io.io;
+  const sink = nested && typeof nested.stdout === "function" && typeof nested.stderr === "function" ? nested : io;
+  const originalStdout = sink.stdout;
+  const originalStderr = sink.stderr;
   io = { ...io, stdout: (text) => originalStdout(redactConfiguredValues(text, env)), stderr: (text) => originalStderr(redactConfiguredValues(text, env)) };
   const mesh = removedMeshInvocation(argv);
   if (mesh.invoked) {

package/plugins/kxm/dist/mcp-server.js

@@ -17121,7 +17121,7 @@ async function deliverInboxNotification(messageId, delivered, notify) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.36";
+var VERSION = "0.7.38";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();
 var meshClient;

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kxm-claude-plugin",
-  "version": "0.7.36",
+  "version": "0.7.38",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/src/cli/vnext.ts

@@ -771,6 +771,13 @@ export async function cmdRouteList(runtime: Runtime): Promise<number> {
   return 0;
 }
 
+export async function cmdRouteCount(runtime: Runtime): Promise<number> {
+  const policy = loadRoutePolicy(runtime.dirs.workdir);
+  const summary = `${policy.admitted.length} admitted / ${policy.disabled.length} disabled`;
+  print(runtime.io, runtime.json, { ok: true, command: "routes count", admitted: policy.admitted.length, disabled: policy.disabled.length, summary }, summary);
+  return 0;
+}
+
 export async function cmdModelInventoryRefresh(runtime: Runtime): Promise<number> {
   if (runtime.dryRun) {
     print(runtime.io, runtime.json, { ok: true, command: "models inventory refresh", dryRun: true }, "would refresh .kxm/models/inventory.yaml");

package/plugins/kxm/src/cli.ts

@@ -114,6 +114,7 @@ import {
   cmdRouteChange,
   cmdModelsScreen,
   cmdRouteList,
+  cmdRouteCount,
   cmdModelInventoryRefresh,
   cmdVnextRuntime,
 } from "./cli/vnext.ts";
@@ -426,6 +427,7 @@ function createProgram(ctx: CliContext, result: { code: number }): Command {
   const routesCmd = addGlobalOptions(program.command("routes").description("Admit or disable verified model routes"));
   routesCmd.helpCommand("help", "Show routes help");
   addGlobalOptions(routesCmd.command("list").description("List route decisions")).action(async function routesListAction(this: Command) { result.code = await cmdRouteList(runtimeFrom(ctx, this)); });
+  addGlobalOptions(routesCmd.command("count").description("Count admitted and disabled routes")).action(async function routesCountAction(this: Command) { result.code = await cmdRouteCount(runtimeFrom(ctx, this)); });
   for (const status of ["admit", "disable"] as const) {
     addGlobalOptions(routesCmd.command(status).description(`${status === "admit" ? "Admit" : "Disable"} a model route from the inventory`)).option("--model <id>", "Exact model id; omit to choose interactively").action(async function routeChangeAction(this: Command, options: { model?: string }) { result.code = await cmdRouteChange(runtimeFrom(ctx, this), status === "admit" ? "admitted" : "disabled", options.model); });
   }
@@ -1210,8 +1212,10 @@ export async function runCli(
   io: CliIo = { stdout: (text) => process.stdout.write(text), stderr: (text) => process.stderr.write(text) },
   cwd = process.cwd(),
 ): Promise<number> {
-  const originalStdout = io.stdout;
-  const originalStderr = io.stderr;
+  const nested = (io as { io?: CliIo }).io;
+  const sink = nested && typeof nested.stdout === "function" && typeof nested.stderr === "function" ? nested : io;
+  const originalStdout = sink.stdout;
+  const originalStderr = sink.stderr;
   io = { ...io, stdout: (text) => originalStdout(redactConfiguredValues(text, env)), stderr: (text) => originalStderr(redactConfiguredValues(text, env)) };
   const mesh = removedMeshInvocation(argv);
   if (mesh.invoked) {

package/plugins/kxm/src/mcp-server.ts

@@ -8,7 +8,7 @@ import { AGENT_COMMANDS_MAP, enforceToolPolicy, getMcpTools, reconcileInbox } fr
 import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 
-const VERSION = "0.7.36";
+const VERSION = "0.7.38";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();
 let meshClient: HubClient | undefined;

package/plugins/kxm/src/vision-gate.ts

@@ -0,0 +1,94 @@
+import { execFileSync } from "node:child_process";
+import { existsSync, statSync } from "node:fs";
+import { isRouteAdmitted } from "./routes.ts";
+
+/** Deterministic vision gate: judge a UI screenshot through an admitted
+ * vision route with a bounded prompt and a strict structured verdict. The
+ * gate never free-form chats and never fabricates — an unreadable image, an
+ * unadmitted route, or an unparsable verdict returns `verdict: null` with a
+ * `divergence` reason. Transport is injectable so tests run without
+ * network. */
+
+export const VISION_GATE_DEFAULT_ROUTE = "zai-coding-cn/glm-5.3-flash";
+const QUESTION_MAX_CHARS = 500;
+const RAW_MAX_CHARS = 2000;
+
+export interface VisionGateOptions {
+  projectRoot?: string | undefined;
+  /** Absolute or project-relative path to the screenshot. */
+  imagePath: string;
+  /** What to assert about the screenshot, phrased as a yes/no question. */
+  question: string;
+  /** Producer id as admitted in routes.yaml. Defaults to the verified
+   * vision route. */
+  route?: string | undefined;
+  timeoutMs?: number | undefined;
+  /** Injectable transport: receives the composed prompt, returns CLI stdout. */
+  transport?: ((prompt: string) => Promise<string>) | undefined;
+}
+
+export interface VisionGateResult {
+  /** true/false when the verdict parsed; null = fail closed. */
+  verdict: boolean | null;
+  route: string;
+  /** Bounded raw output for audit. */
+  raw: string;
+  divergence?: string | undefined;
+}
+
+export function visionGatePrompt(question: string, imagePath?: string | undefined): string {
+  const bounded = question.trim().slice(0, QUESTION_MAX_CHARS);
+  const reference = imagePath ? `Look at the image @${imagePath}.` : "Look at the image attached to this prompt.";
+  return [
+    "You are judging a UI screenshot for an automated verification gate.",
+    reference,
+    bounded,
+    'Reply with exactly one JSON object and nothing else: {"verdict": true} or {"verdict": false}',
+  ].join(" ");
+}
+
+export function parseVisionVerdict(raw: string): boolean | null {
+  const match = /"verdict"\s*:\s*(true|false)/i.exec(raw);
+  return match ? match[1] === "true" : null;
+}
+
+function defaultTransport(prompt: string, timeoutMs: number): string {
+  return execFileSync(
+    "pi",
+    ["--provider", "zai-coding-cn", "--model", "glm-5.3-flash", "-p", "--no-session", prompt],
+    { encoding: "utf8", timeout: timeoutMs, windowsHide: true },
+  );
+}
+
+export async function runVisionGate(options: VisionGateOptions): Promise<VisionGateResult> {
+  const projectRoot = options.projectRoot ?? process.cwd();
+  const route = options.route ?? VISION_GATE_DEFAULT_ROUTE;
+  const timeoutMs = options.timeoutMs ?? 90_000;
+  const base: VisionGateResult = { verdict: null, route, raw: "" };
+
+  if (!Number.isInteger(timeoutMs) || timeoutMs < 5_000 || timeoutMs > 300_000) {
+    return { ...base, divergence: "timeout_out_of_bounds" };
+  }
+  if (!options.imagePath || !existsSync(options.imagePath) || !statSync(options.imagePath).isFile()) {
+    return { ...base, divergence: "image unreadable" };
+  }
+  if (!isRouteAdmitted(projectRoot, route)) {
+    return { ...base, divergence: "route_not_admitted" };
+  }
+  const prompt = visionGatePrompt(options.question, options.imagePath);
+
+  let raw: string;
+  try {
+    raw = options.transport
+      ? await options.transport(prompt)
+      : defaultTransport(prompt, timeoutMs);
+  } catch (error) {
+    return { ...base, divergence: `transport failed: ${String((error as Error)?.message ?? error).slice(0, 200)}` };
+  }
+  const boundedRaw = raw.slice(0, RAW_MAX_CHARS);
+  const verdict = parseVisionVerdict(boundedRaw);
+  if (verdict === null) {
+    return { ...base, raw: boundedRaw, divergence: "verdict unreadable" };
+  }
+  return { ...base, verdict, raw: boundedRaw };
+}